Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zcOs67EBfe49EMC-7QgReR0sAAA.cer
File: zcOs67EBfe49EMC-7QgReR0sAAA.cer (raw, json)
Hash identifier: keZAB7D7UuvRDJfJUqtY4R67Cp8Qz0tNjTzT0uyt4Bs=
Subject key identifier: CD:C3:AC:EB:B1:01:7D:EE:3D:10:C0:BE:ED:08:11:79:1D:2C:00:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A3B5E9ABE5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/e9f3a7-359c-4e3c-8c4e-5120413ff107/1/zcOs67EBfe49EMC-7QgReR0sAAA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/e9f3a7-359c-4e3c-8c4e-5120413ff107/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:56:22 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 15989
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703131659237 (0xa3b5e9abe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdc3acebb1017dee3d10c0beed0811791d2c0000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d8:b2:65:e6:23:28:ee:07:f8:07:f9:f3:a1:
82:b5:31:52:39:58:e8:b3:fd:fd:fa:6b:9d:51:54:
15:14:14:49:1c:46:64:81:f4:45:a2:78:96:09:69:
ef:71:f4:63:5c:4b:54:94:d7:05:10:61:0b:3d:e3:
4f:34:a7:49:c9:72:65:8e:ff:97:ab:46:04:f4:da:
fa:47:f3:2b:58:ca:af:9b:f5:83:e7:a6:15:ff:ef:
c6:6f:a2:6e:74:98:0a:88:40:15:6a:22:49:42:da:
9e:b1:30:6c:31:e0:f8:a7:69:62:e8:6d:52:9a:5d:
07:ab:e3:e7:0c:e5:db:64:38:7e:65:02:42:e7:20:
48:86:ef:4e:e2:be:e4:7a:ff:84:1b:8c:59:29:83:
06:41:cc:0f:49:9d:18:9c:08:1a:cc:b9:7a:63:4a:
d0:dc:bd:7e:38:09:51:95:55:fe:3c:e6:ab:30:0a:
46:5d:e9:5b:08:aa:f3:78:ef:98:d5:5c:1f:fa:a7:
58:63:d2:cf:32:53:4a:ff:5c:75:86:ee:c7:b5:78:
50:65:e7:1c:39:fe:30:aa:f7:ae:6f:7e:22:6c:41:
6a:15:51:24:7b:f2:09:e5:ec:aa:03:9c:73:d2:dc:
9b:63:28:49:52:0d:93:59:ca:60:bd:b8:58:60:a9:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C3:AC:EB:B1:01:7D:EE:3D:10:C0:BE:ED:08:11:79:1D:2C:00:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e9f3a7-359c-4e3c-8c4e-5120413ff107/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e9f3a7-359c-4e3c-8c4e-5120413ff107/1/zcOs67EBfe49EMC-7QgReR0sAAA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15989
Signature Algorithm: sha256WithRSAEncryption
a5:1e:fe:57:50:86:58:03:db:8b:c2:e8:45:57:ba:fb:81:6e:
57:47:da:9f:29:e8:8c:d4:0e:d2:65:49:cd:c7:5a:90:80:33:
fc:82:2d:6d:6b:f1:d7:b7:72:e9:b7:16:62:fb:2b:1f:9c:30:
e8:a2:b9:65:a4:9e:cf:44:7e:b5:7f:b4:b2:35:b2:40:f9:a8:
6e:f8:9d:c0:30:e1:7c:6b:33:46:44:d4:dd:fe:97:ce:cc:d9:
e2:a4:03:b7:80:6d:9d:04:fa:19:d4:e6:64:cc:eb:f4:75:13:
49:77:3c:86:c5:ad:41:c5:37:91:2d:4b:f4:24:31:8c:ea:d2:
09:88:37:65:7f:e2:07:2c:3d:1c:7f:8c:39:81:f1:e7:42:b6:
66:1a:46:84:5b:04:63:63:8c:5d:1a:47:55:e0:0f:97:a1:ea:
3c:06:f2:df:aa:62:09:47:fb:13:9d:d6:76:e0:31:9e:98:d1:
0e:e6:ae:a1:69:36:26:d2:45:57:4e:92:d7:be:27:4f:8a:b6:
aa:93:a8:2c:5e:55:65:40:90:1e:6f:fc:91:44:11:67:63:b4:
8d:46:3c:09:d4:f4:34:0b:74:95:68:e3:dc:11:ae:bd:59:6d:
fc:9b:b4:14:f9:22:83:dd:04:ae:d6:9c:3c:6f:ad:65:46:d9:
cf:cd:04:36
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIGAKO16avlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMT
KDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRkZGU2NjkwHhcNMjIw
MTAxMDk1NjIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjZGMzYWNlYmIx
MDE3ZGVlM2QxMGMwYmVlZDA4MTE3OTFkMmMwMDAwMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA7NiyZeYjKO4H+Af586GCtTFSOVjos/39+mudUVQVFBRJ
HEZkgfRFoniWCWnvcfRjXEtUlNcFEGELPeNPNKdJyXJljv+Xq0YE9Nr6R/MrWMqv
m/WD56YV/+/Gb6JudJgKiEAVaiJJQtqesTBsMeD4p2li6G1Sml0Hq+PnDOXbZDh+
ZQJC5yBIhu9O4r7kev+EG4xZKYMGQcwPSZ0YnAgazLl6Y0rQ3L1+OAlRlVX+POar
MApGXelbCKrzeO+Y1Vwf+qdYY9LPMlNK/1x1hu7HtXhQZeccOf4wqveub34ibEFq
FVEke/IJ5eyqA5xz0tybYyhJUg2TWcpgvbhYYKk+9QIDAQABo4ICfjCCAnowHQYD
VR0OBBYEFM3DrOuxAX3uPRDAvu0IEXkdLAAAMB8GA1UdIwQYMBaAFCqUqN1VSucB
ByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMGAG
CCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jZXIw
ggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M0L2U5ZjNhNy0zNTljLTRlM2Mt
OGM0ZS01MTIwNDEzZmYxMDcvMS8wfAYIKwYBBQUHMAqGcHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvZTlmM2E3LTM1OWMtNGUzYy04
YzRlLTUxMjA0MTNmZjEwNy8xL3pjT3M2N0VCZmU0OUVNQy03UWdSZVIwc0FBQS5t
ZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5ldC9ub3RpZmljYXRp
b24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9y
ZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMyUUhWVjNkNW1rLmNy
bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUFBwEIAQH/BAowCKAG
MAQCAj51MA0GCSqGSIb3DQEBCwUAA4IBAQClHv5XUIZYA9uLwuhFV7r7gW5XR9qf
KeiM1A7SZUnNx1qQgDP8gi1ta/HXt3LptxZi+ysfnDDoorllpJ7PRH61f7SyNbJA
+ahu+J3AMOF8azNGRNTd/pfOzNnipAO3gG2dBPoZ1OZkzOv0dRNJdzyGxa1BxTeR
LUv0JDGM6tIJiDdlf+IHLD0cf4w5gfHnQrZmGkaEWwRjY4xdGkdV4A+Xoeo8BvLf
qmIJR/sTndZ24DGemNEO5q6haTYm0kVXTpLXvidPiraqk6gsXlVlQJAeb/yRRBFn
Y7SNRjwJ1PQ0C3SVaOPcEa69WW38m7QU+SKD3QSu1pw8b61lRtnPzQQ2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:43 2024 by rpki-client on console-ams.rpki-client.org